stack kb security-timeline-api resolve-timeline cli command
Auth required
Idempotent
Scope: global
elastic stack kb security-timeline-api resolve-timeline [options]
Resolve a Timeline or Timeline template
Behaviour flags:
--dry-run — validate all inputs and exit without performing any action
--template-timeline-idstring- The ID of the template timeline to resolve
--idstring- The ID of the timeline to resolve
--input-filestring- path to a JSON file to use as command input
--dry-run- validate all inputs and exit without performing any action (preview changes without applying them)
--no-validate- skip input validation and send the request as-is
--output-fieldsstring- comma-separated list of fields to include in output (dot-notation supported)
--output-templatestring- Mustache-like template for custom text output (e.g. "{{id}}: {{name}}")
--json-
output as JSON